Add SAN to the helm generated cert (#97)

Signed-off-by: Dustin Decker <[email protected]>
cruise-automation · Jan 4, 2021 · f667eb2 · f667eb2
1 parent 4437b41
commit f667eb2
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/charts/k-rail/templates/deployment.yaml b/charts/k-rail/templates/deployment.yaml
@@ -1,6 +1,7 @@
 {{- $cn := printf "k-rail.%s.svc" .Release.Namespace }}
 {{- $ca := genCA "k-rail-admission-ca" 3650 -}}
-{{- $cert := genSignedCert $cn nil nil 3650 $ca -}}
+{{- $san := printf "k-rail.%s.svc" .Release.Namespace }}
+{{- $cert := genSignedCert $cn nil (list $san) 3650 $ca -}}
 ---
 apiVersion: v1
 kind: Secret